Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

This thread has been viewed 33 times
  • 1.  Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    Posted Jan 24, 2021 09:16 AM
    Dear,

    We have 2 Mobility Controllers 7205, we have put them via VRRP for Master redundancy, but there is something with the config sync.
    When logging in on the standby controller, there are missing 'access control roles' and 'system roles'
    We get the error:

    Error: Role 'authenticated' is Unknown
    Error: Role 'vlan-55-guest-cap' is Unknown
    Error: Role 'vlan-55-guest' is Unknown Error: Role 'vlan-55-guest' is Unknown

    When checking the config, the roles aren't there.
    Software version 6.5.4.16

    Can someone assist or troubleshoot?


    ------------------------------
    Systeembeheer Van Hoecke
    ------------------------------


  • 2.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    EMPLOYEE
    Posted Jan 24, 2021 02:14 PM
    What is the output of show vrrp and show master-redundancy from both controllers?
    Do you have centralized licensing configured?

    ------------------------------
    Ayman Mukaddam
    ------------------------------



  • 3.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    Posted Jan 25, 2021 01:48 AM
    Dear,

    As requested:
    WLC-01 (master) 

    (WLC-01) #show vrrp
    Virtual Router 1:
    Description MASTER-PRIMARY
    Admin State UP, VR State MASTER
    IP Address 192.168.44.252, MAC Address 00:00:5e:00:01:01, vlan 44
    Priority 110, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type PASSWORD, Auth data: ********
    tracking type is master-up-time, duration 30 minutes, value 20
    tracked priority 130

    (WLC-01) #show master-redundancy
    Master redundancy configuration:
    VRRP Id 1 current state is MASTER
    Peer's IP Address is 192.168.44.251
    Peer's IPSEC Key is ********

    WLC-02 (standby)

    (WLC-02) #show vrrp
    Virtual Router 1:
    Description MASTER-STANDBY
    Admin State UP, VR State BACKUP
    IP Address 192.168.44.252, MAC Address 00:00:5e:00:01:01, vlan 44
    Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type PASSWORD, Auth data: ********
    tracking type is master-up-time, duration 30 minutes, value 20
    tracked priority 100

    (WLC-02) #show master-redundancy
    Master redundancy configuration:
    VRRP Id 1 current state is BACKUP
    Peer's IP Address is 192.168.44.250
    Peer's IPSEC Key is ********

    Other parameters, like AP System, as a test are syncing, but not the errors as described.
    Centralized licensing is disabled, do I need to enable it? 
    The master controller says "License server redundancy is already available since Master-standby redundancy is configured."

    ------------------------------
    Systeembeheer Van Hoecke
    ------------------------------



  • 4.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    MVP EXPERT
    Posted Jan 25, 2021 03:57 AM
    You will need to enable Centralize licensing,  as if there is no PEF licensing on the standby then the custom User Roles cannot be created.
    Have you got the output of the following

    #show license profile
    #show master-redundancy
    #show database synchronize



    ------------------------------
    Craig Syme
    ------------------------------



  • 5.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    Posted Jan 25, 2021 04:43 AM
    Will i break anything, if I just enable 'Centralized licensing'?
    And do I need to just check the checkbox? Or anything else?

    Output as requested:

    (WLC-01) #show license profile
    License provisioning profile
    ----------------------------
    Parameter Value
    --------- -----
    Centralized Licensing Disabled

    (WLC-01) #show master-redundancy
    Master redundancy configuration:
    VRRP Id 1 current state is MASTER
    Peer's IP Address is 192.168.44.251
    Peer's IPSEC Key is ********

    (WLC-01) #show database synchronize
    Last synchronization time: Mon Jan 25 10:09:49 2021
    To Master Switch at 192.168.44.251: succeeded
    WMS Database backup file size: 797810 bytes
    Local User Database backup file size: 194022 bytes
    CPSec Database backup file size: 3248 bytes
    Synchronization took 1 second
    1176 synchronization attempted
    1169 synchronization have failed
    Periodic synchronization is enabled and runs every 60 minutes
    Synchronization doesn't include Captive Portal Custom data

    ----------------------------------------------------------------------------------------

    (WLC-02) #show license profile
    License provisioning profile
    ----------------------------
    Parameter Value
    --------- -----
    Centralized Licensing Disabled

    (WLC-02) #show master-redundancy
    Master redundancy configuration:
    VRRP Id 1 current state is BACKUP
    Peer's IP Address is 192.168.44.250
    Peer's IPSEC Key is ********

    (WLC-02) #show database synchronize
    Last synchronization time: Mon Jan 25 10:09:49 2021
    From Master Switch at 192.168.44.250: succeeded
    WMS Database backup file size: 797810 bytes
    Local User Database backup file size: 194022 bytes
    CPSec Database backup file size: 3248 bytes
    Synchronization took 1 second
    3 synchronization attempted
    0 synchronization have failed
    Periodic synchronization is enabled and runs every 60 minutes
    Synchronization doesn't include Captive Portal Custom data


    ------------------------------
    Systeembeheer Van Hoecke
    ------------------------------



  • 6.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    MVP EXPERT
    Posted Jan 25, 2021 04:59 AM
    It will not break anything, all licenses will be added to a single pool and shared between all controllers.





  • 7.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    Posted Jan 25, 2021 05:47 AM
    Craig,

    Thanks for your input, I have enabled centralized licensing, and now the config is synced correctly (with system/user roles)

    Thank you for your help!

    ------------------------------
    Systeembeheer Van Hoecke
    ------------------------------



  • 8.  RE: Aruba Mobility Controller 7205 - Master/Standby VRRP - Config not syncing

    MVP EXPERT
    Posted Jan 25, 2021 06:03 AM
    Awesome, glad to hear it :)

    ------------------------------
    Craig Syme
    ------------------------------